Method of Securing Network Access Radio Systems

ABSTRACT

A method of providing security for network access radio systems and associated access radio security systems used with the systems. The method includes connecting an access radio having a radio link to a network; communicating between the access radio and a computer over the network using a ping application having ping commands and unique encrypted codes; and enabling operation of the access radio when the access radio is receiving ping commands. Typically, the access radio and the computer are nodes on the network and the network is a local area network (LAN). The ping application sends packets of information from the computer to the access radio and receives a response from the access radio. The ping application must be functioning (i.e., sending and receiving commands between the computer and the access radio) to enable the access radio to communicate via the radio link with a remote network.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation of application Ser. No. 14/156,067,filed on Jan. 15, 2014, which is a continuation of application Ser. No.12/869,965, filed on Aug. 27, 2010, which issued as U.S. Pat. No.8,649,274 on Feb. 11, 2014, which is a continuation of application Ser.No. 11/299,348, filed on Dec. 9, 2005, which issued as U.S. Pat. No.7,849,309 on Dec. 7, 2010, which are incorporated herein in theirentireties.

BACKGROUND

1. Field

The embodiments disclosed herein relate to a method of securing networkaccess radio systems from unauthorized users. In particular, theembodiments relate to securing network access radio systems byrestricting network access to verified access radios.

2. Brief Description of the Related Art

Improvements in wireless communication technology have allowed users toeasily access networks from remote locations. However, this conveniencehas come at a price and security has become a growing concern amongcustomers and network providers. As wireless wide area and local areanetworks become more critical to core business functions, networksecurity has become increasingly more important because of thefar-reaching consequences of a breach in security. Essential,confidential business information residing on corporate networks must beeasily accessible to numerous users within a corporation, while at thesame time, protected from unauthorized users. When corporate networkscan be wirelessly accessed from remote locations, the risks aresignificantly increased. Unauthorized intrusions into a corporatenetwork can result in the theft of valuable corporate information, thecorruption of files and data and/or the disruption of network service.No corporation can afford to risk such dire consequences.

Many networks that can be accessed via a wireless device employencryption, passwords, verification of device types and other securitymeasures to protect against access by an unauthorized third party. Othertechnologies and access methods can also contribute to network security.Spread spectrum technology, for example, is inherently secure, but itonly provides a link level security. For infrastructure networks,manually entered keys or digital certificates may be used that areretained in the device. However, they can be compromised and they reducethe flexibility of installing new devices on the network or replacingdevices already connected. Also, if communications based on thepasswords, personal identification numbers (PINs) or digitalcertificates are intercepted during the connection process, thesesecurity measures may be bypassed by using the intercepted key exchangeinformation.

Corporations have expressed concerns that radio systems, which are usedto access corporate networks, are especially vulnerable to unauthorizedusers and they could jeopardize the security of confidential corporateinformation. A thief could easily gain unauthorized access to acorporation's private network by stealing an access radio with built inaccess authorization from an authorized user and using the stolen radioto log onto the network. Once logged onto the network, the unauthorizeduser would have unrestricted access and could change, download, destroyor infect operating systems and databases. This risk is the same for anycompany or government organization that operates a private or publicnetwork. Thus, the theft of an access radio and its unauthorized use toaccess a network's applications and/or information can seriously damagethe operations of any organization.

By way of background, access radios connect a network (typically, anin-building LAN—“local area network”) to a remote networks via a radiolink—where the “other end” of the radio link is often a shared radio ona central antenna. LANs are high-speed, low-error data networks coveringa relatively small geographic area (up to a few thousand meters), whichconnect workstations, peripherals, terminals, and other devices in asingle building or other geographically limited area. LAN standardsspecify cabling and signaling at the physical and data link layers ofthe Open System Interconnection (OSI) model. Ethernet, Fiber DistributedData Interface (“FDDI”), and Token Ring are widely used LANtechnologies.

A network access radio is typically connected to a LAN and communicateswith other devices on the LAN, such as servers, computers and databases.The access radio also communicates via a radio link with one or moreremote networks and/or devices. In addition to communicating with otherdevices on the LAN and remote networks and/or devices, access radios canperform radio link security (similar to the security functions performedby a router), virtual local area network (VLAN) support functionalityand power and/or network management functions. However, newer accessradios are typically small and, therefore, can be easily removed fromthe LAN and from a building by a thief. The stolen access radio couldthen be operated by an unauthorized user from another location to access“secure” networks and devices. Accordingly, it is easy to understand whythis risk has raised serious concerns with operators of networks withwireless access.

The risks involved with the theft and unauthorized use of an accessradio makes it desirable to provide a method and apparatus for enhancingsecurity in network access radio systems that does not impede access byauthorized users and provides a level of security that is notcompromised by the theft or unauthorized removal of an access radio.

SUMMARY

In accordance with the embodiments disclosed herein, a method ofproviding security for network access radio systems is provided. Themethod includes: connecting an access radio having a radio link and afirst ping application to a network; communicating between the accessradio and a processing device on the network using the first pingapplication; and disabling the radio link in response to a terminationof ping communication between the access radio and the processingdevice. The processing device includes a second ping program that issubstantially the same as first ping program and allows the processingdevice and the access radio to communicate using ping commands. A pingapplication can be a simple “heartbeat” check, or it can be assophisticated as an encrypted, device specific, revolving key exchangemechanism.

In another embodiment, the method of providing security for networkaccess radio systems includes: providing a network having a networkaccess radio that has a radio link, a device and a ping application forsending and receiving encrypted ping commands; sending and receivingping commands between the device and the access radio; and enablingoperation of the radio link when the access radio is receiving pingcommands. Preferably, the encrypted ping commands include identifyinginformation that is unique for each access radio.

The access radio and the device can be nodes on the network and thenetwork can be a local area network (LAN) or a wide area network (WAN).The device is preferably a computer, a server or a router. Although, anydevice having a central processing unit (CPU) with sufficient processingcapacity for executing the ping application, such as an alarm managementsystem, can be used.

The ping application sends commands in the form of packets ofinformation from the device to the access radio and receives a responsefrom the access radio. Preferably, the ping communication includes anencrypted password or code that prevents unauthorized pingcommunications with the access radio. The access radio can support afile transfer protocol, which is used to send files. In preferredembodiments, the file transfer protocol can only transfer files when theping application is operating. The ping application must be functioning(i.e., sending and receiving commands between the device and the accessradio) when the access radio is communicating with one or more remotenetworks.

In another embodiment, a secure access radio system includes a network,a device connected to the network, an access radio having a radio linkconnected to the network, and a ping application for sending andreceiving ping commands between the device and the access radio. Thedevice and access radio can be nodes on the network. The access radiocan communicate with a remote device via the radio link when the pingapplication is sending and/or receiving ping commands, preferably in theform of packets of information. The preferred type of device is acomputer, a server, or a router, but any device that includes a CPU withenough excess processing capacity to operate the ping application can beused. The secure access radio system can be used for a local areanetwork (LAN) or a wide area network (WAN).

Embodiments of the disclosed method of providing security for networkaccess radio systems and the disclosed network access radio systems, aswell as other objects, features and advantages will be apparent from thefollowing detailed description, which is to be read in conjunction withthe accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

Other objects and many attendant features of the disclosed embodimentswill be readily appreciated as the embodiments become better understoodby reference to the following detailed description when considered inconnection with the accompanying drawings wherein:

FIG. 1 is a drawing showing the connection of two networks using anaccess radio system.

FIG. 2 is a drawing showing the connection of a local area network to aremote network using an access radio.

FIG. 3 is a flow chart of the method of securing a network access radiosystem.

DETAILED DESCRIPTION

The embodiments disclosed herein relate to a method for providingsecurity for networks that can be accessed using an access radio systemand the access radio security systems that are used. Access radiosconnect a network (typically an in-building local area network or “LAN”)to a remote network via a radio link. The access radio is usually a nodeon the network and the “other end” of the link can be a shared radio ona central antenna, which is also referred to as a “central radio.” Thecentral radio has the ability to talk to multiple subscriber radios byexecuting a multiple access protocol between itself and all thesubscriber stations. These protocols are often time based (i.e., theradios take turns) but can also use any of a number of frequency or codebased multiple access methodologies. Access radio systems are well knownto those skilled in the art and are widely used to provide access toprivate, as well as public, networks. However, the theft of an accessradio can compromise the network and all of the information accessiblethrough the network. The disclosed embodiments provide security foraccess radio systems by disabling the radio if it is removed from thenetwork on which it resides.

The access radio security system includes a program that is installedand runs on the access radio for a network, typically a LAN. Thisprogram communicates (using “pings”) with a similar program running on asecured device (such as a computer, a server, a router or other devicethat has a central processing unit (CPU) with sufficient processingcapacity to support the program) on the same network. (As used herein,the term “secured device” refers to a device on the network which cannotbe compromised or accessed by unauthorized users.) A “ping request”determines whether the access radio is reachable at the current timefrom the secured device. As long as the hard-wired communication linkbetween the access radio and the secured device is operating, the accessradio will continue to function. If the connection between the accessradio and the secured device is lost for any reason, the radio link ofthe access radio will be disabled and it will cease functioning. Inpreferred embodiments, the loss of the connection alerts networksecurity and/or initiates an alarm. Accordingly, after the radio isdisconnected or removed from the LAN by a thief or unauthorized person,it cannot be used in another location for unauthorized access to thenetwork via the radio link.

The “ping” (Packet Internet or Inter-Network Groper) communicationbetween the access radio and the secured device is supported by a pingprogram which is available on most networks as a standard diagnosticprogram. The term “ping” can be loosely interpreted to mean “to get theattention of” or “to check for the presence of” another party on thenetwork. Ping is a basic network program that lets a user verify that aparticular network address exists and can accept requests. Users andsoftware processes employ ping to diagnostically ensure that a device,such as a host computer, that the user is attempting to reach isactually operating. The ping software utility sends an Internet ControlMessage Protocol (ICMP) packet to a specified Internet Protocol (IP)network address or a qualified domain name. (ICMP is an extension to theIP protocol that supports packets with error, control and informationalmessages.) The utility waits for replies from the address in response toreceipt of the ICMP packet. Ping may also be used to communicate with anoperating host in order to determine the amount of time required toreceive a response from the host, as well as other related statistics.

The verb ping is defined herein as the act of using the ping utility orcommand. Ping is typically used as a diagnostic tool to ensure that ahost computer on a network is actually operating. If, for example, auser can't ping a host, then the user will be unable to use the FileTransfer Protocol (FTP) to send files to that host. A ping program testsnetwork connectivity by sending data from one device on a network whichis then echoed by another device. Preferably, the ping program is aseparate, low level application that runs in parallel to the applicationlayer in the protocol stack and is transparent to the application layer.The ping command is often executed using primarily the Media AccessControl (MAC) layer protocol. Before a ping command is sent to a device,the user can configure the ping settings, such as number of packets,time to live, size, and timeout. The ping command has a specificprotocol that must be present in order for the access radio to continueoperating. This protocol provides security for the ping program so thatit cannot be circumvented or “spoofed” by unauthorized users. Forexample, the protocol can include a specific code for the radio and/orlocation pair, either alone or together with other unique identificationinformation. If this code is not correctly entered, the ping programwill not be recognized by the access radio and the device andcommunication using ping commands will not be established.

A ping program is used to confirm the connectivity of an access radio toa device on the network on which they reside, typically a LAN. If theping command confirms a valid connection of the access radio to thedevice via the LAN, the access radio is enabled and can continue toaccess a remote network via the radio link of the access radio. If theping command “times out,” that is, it does not confirm by a return pingcommand that the access radio is connected to the LAN within a specifiedperiod of time, the access radio is disabled and its radio link cannotbe used to access the remote network. The ping program preferablyincludes an encrypted code, such as a password or a personalidentification number. Preferred codes include key exchange/encryptedtunneling methodologies, which are well known to those skilled in theart. If the ping command from another device on the network to theaccess radio does not include the encrypted code, the access radio willnot respond to the ping commands. Thus, the access radio must beconnected to a dedicated network, and that connection must be verifiedby continuous coded ping communications, in order to operate. Oncedisconnected from the network and the ping communication with the otherdevice on the network, the access radio cannot be used to access remotenetworks which may contain confidential information.

The disclosed method of providing security for network access radiosystems establishes a continuous communication between an access radioconnected to the network and another device on the network using a pingprogram. The access radio can only communicate via its radio link with aremote network or device while the ping communication continues. If theaccess radio does not receive a ping signal from the other device on thenetwork within a specified period of time, the radio link is disabled.In order to provide additional security, the ping signal from the otherdevice includes a unique code or identifier. The access radio will notacknowledge receipt of the ping if the code is absent. This prevents athief from removing the access radio from the network and using it atanother location to access confidential information on the remotenetwork. Thus, the ping signals enable the operation of the radio linkand ensure that the access radio can only operate when connected througha network to a device having the uniquely coded ping program.

The access radio communicates using the ping program with anotherpermanent node on the network, preferably a computer, a server or arouter. However, any device on the network with a CPU that is capable ofsupporting the ping program (i.e., the ping software application) can beused to communicate with the access radio. The access radio securitysystem can be used on any network, but it is preferably used to connecta local area network (LAN) with a remote location; typically, a remotenetwork.

The access radio security system uses the ping program to continuouslysend packets of information back and forth over the network between thedevice and the access radio. At least one of these packets ofinformation includes a code or identifier that is specific to theparticular access radio. The access radio contains a software programwhich monitors the ping communications to verify that the access radiois physically connected to the network and has not been removed toanother location. The ping program is set up to send a ping at anarbitrarily selected interval of time after a ping is received from theother device on the network. Therefore, if the program in the accessradio, which monitors the ping communications, detects that a pingcommunication has not been received within the time limit, the programdisables the radio link and/or sends a message to the network operator,preferably an alarm signal. However, as long as the access radiocontinues to communicate over the network with the other device usingthe ping program, the access radio is enabled and can function as aradio link with a remote network or device. In preferred embodiments,the device that communicates with the access radio over the network hasa ping program with a clock which will time-out and alarm if the devicedoes not receive a ping command within a specified period of time.

The secure access radio system includes a network, a device connected tothe network, an access radio connected to the network, and a pingapplication for sending and receiving ping commands between the deviceand the access radio. The secure access radio system can be used for anynetwork, such as local area networks (LANs) and wide area networks(WANs). The device and access radio are nodes on the network thatcommunicate with each other over the network. The ping program isinstalled in both the access radio and the device. The device can be acomputer, a server, a router or any other device that includes a CPUwith sufficient capacity to operate the ping program. In preferredembodiments, the radio link of the access radio is only enabled when theping program in the access radio is sending and receiving coded signalsto and from the ping program in the device. The ping commands arepreferably in the form of packets of information. In other embodiments,the loss of the ping signal between the access radio and the device willactuate an alarm to alert the network operator, but will not disable theradio link of the access radio.

Referring now to the figures, FIG. 1 shows a local area network (LAN) 10that is connected to a remote network 20 using an access radio system.The LAN 10 has a plurality of nodes including an access radio 12 and adevice 14. The device 14 hosts a ping application which continuouslysends and receives ping commands to and from the access radio 12, whichalso hosts a ping application. As long as the access radio 12 continuesto receive the ping commands, the access radio 12 will continue tocommunicate via the radio link 18 with the remote network 20. Typically,the remote network 20 includes a central radio 22 which communicateswith the access radio 12 on the LAN 10. The signals received from theaccess radio 12 by the central radio 22 can then be connected to a widearea network 20, which in turn can connect to other locations.

The ping commands, which are sent between the device 14 and the accessradio 12, enable the operation of the radio link 18 of the access radio12. The access radio 12 includes a software program that disables theradio link 18 if the ping commands are not continuously received. If theping commands are interrupted for more than a specified period of time,the software program in the access radio 12 disables communication withthe remote network 20 via the radio link 18. Thus, the access radio 12must be connected to the LAN 10 and continuously receive ping commandsfrom the device 14 in order to function.

FIG. 2 is a drawing of a local area network (LAN) 10, which is connectedby an access radio 12 via a radio link 18 to various services on aremote network 20. The LAN 10 includes a server 14 which hosts a pingapplication that sends and receives ping commands 16 to and from theping application on the access radio 12. In addition, the LAN 10 caninclude other devices, such as data storage devices 11, computerworkstations 13 and telephone systems 15. When the ping application inthe access radio 12 is sending and receiving ping commands 16 to andfrom the ping application in the server 14, the radio link of the accessradio 12 is enabled and can communicate via the radio link 18 with theremote network 20.

FIG. 2 shows the access radio 12 communicating via the radio link 18with a common antenna 21 for a variety of services on the network 20that can include public data 23, private data 25, voice communications27 and value added network services 29. The radio link 18 to theservices of the network 20 is only available to the LAN 10 through theaccess radio 12. If the ping commands 16 are not received within aspecified time interval, the access radio 12 is disabled and the LAN 10can no longer access the services of the network 20 via the radio link18.

FIG. 3 is a flow chart of the method of securing a network access radiosystem, which includes providing a network having an access radio and adevice, such as a computer or a server, in step 50. The device sends aping signal in step 56 to the access radio either when the access radiosecurity system is started in step 52 or (step 54) after the devicereceives a ping signal in step 62 from the access radio. If the accessradio receives the ping signal in step 58, it sends a ping signal backto the device in step 60. If the access radio does not receive the pingsignal in step 58, after a time delay in step 64, the access radio isdisabled in step 66 and an alarm is initiated in step 68.

If the device receives the ping signal from the access radio in step 62,the device sends a ping signal to the access radio in step 56. If thedevice does not receive the ping signal in step 62, after a time delayin step 70, an alarm is initiated in step 72. As long as the device andthe access radio continue to send and receive ping signals from oneanother in steps 56, 58, 60 and 62, the access radio is enabled and cancommunicate with a remote network via the radio link. However, if a pingsignal is not received by the access radio after a time delay in step64, the access radio will be disabled and cannot communicate with theremote network until it is reactivated by the network operator.

Thus, while there have been described specific embodiments, thoseskilled in the art will realize that other embodiments can be madewithout departing from the spirit of the disclosed concepts, and it isintended to include all such further modifications and changes as beingwithin the true scope of the claims set forth herein.

What is claimed is:
 1. A method of securing a radio link comprising:providing encrypted ping communication between a device and an accessradio, the encrypted ping communication being provided using a firstnetwork, the encrypted ping communication being bidirectional betweenthe device and the access radio; enabling a radio link between theaccess radio and a second network in response to receiving the encryptedping communication by the access radio, the second network being remotefrom the access radio, the second network being remote from the firstnetwork; and disabling the radio link between the access radio and thesecond network in response to termination of the encrypted pingcommunication between the device and the access radio.
 2. The methodaccording to claim 1, wherein providing encrypted ping communicationfurther comprises providing a first encrypted ping communication fromthe access radio to the device, and providing a second encrypted pingcommunication from the device to the access radio.
 3. The methodaccording to claim 1, wherein providing encrypted ping communicationfurther comprises transferring information packets between the deviceand the access radio.
 4. The method according to claim 2, whereinproviding encrypted ping communication further comprises transferringfiles in the first encrypted ping communication.
 5. The method accordingto claim 2, wherein the first encrypted ping communication and thesecond encrypted ping communication are associated with a verified code,the verified code being associated with the access radio.
 6. The methodaccording to claim 5, wherein the verified code is used with keyexchange encrypted tunneling.
 7. The method according to claim 1,further comprising enabling communication between the first network andthe second network using the access radio in response to the radio linkbeing enabled.
 8. A computer-readable medium storing instructions that,when executed by a processing device, perform operations comprising:providing encrypted ping communication between a device and an accessradio, the encrypted ping communication being provided using a firstnetwork, the encrypted ping communication being bidirectional betweenthe device and the access radio; enabling a radio link between theaccess radio and a second network in response to receiving the encryptedping communication by the access radio, the second network being remotefrom the access radio, the second network being remote from the firstnetwork; and disabling the radio link between the access radio and thesecond network in response to termination of the encrypted pingcommunication between the device and the access radio.
 9. Thecomputer-readable medium according to claim 8, wherein providingencrypted ping communication further comprises providing a firstencrypted ping communication from the access radio to the device, andproviding a second encrypted ping communication from the device to theaccess radio.
 10. The computer-readable medium according to claim 8,wherein providing the encrypted ping communication further comprisestransferring information packets between the device and the accessradio.
 11. The computer-readable medium according to claim 9, whereinproviding encrypted ping communication further comprises transferringfiles in the first encrypted ping communication.
 12. Thecomputer-readable medium according to claim 9, wherein the firstencrypted ping communication and the second encrypted ping communicationare associated with a verified code, the verified code being associatedwith the access radio.
 13. The computer-readable medium according toclaim 12, wherein the verified code is used with key exchange encryptedtunneling.
 14. The computer-readable medium according to claim 8,wherein the operations further comprise enabling communication betweenthe first network and the second network using the access radio inresponse to the radio link being enabled.
 15. A network access radiosystem comprising: an access radio; and a device configured to provideencrypted ping communication between the device and the access radiousing a first network, wherein the encrypted ping communication isbidirectional between the device and the access radio, wherein a radiolink between the access radio and a second network is enabled inresponse to receiving the encrypted ping communication by the accessradio, wherein the second network is remote from the access radio,wherein the second network is remote from the first network, and whereinthe radio link between the access radio and the second network isdisabled in response to termination of the encrypted ping communicationbetween the device and the access radio.
 16. The network access radiosystem according to claim 15, wherein the first network comprises alocal area network, wherein the access radio and the device are nodes,and wherein the nodes are associated with the first network.
 17. Thenetwork access radio system according to claim 15, wherein the encryptedping communication comprises a first encrypted ping communication fromthe access radio to the device, and wherein the ping communicationcomprises a second encrypted ping communication from the device to theaccess radio.
 18. The network access radio system according to claim 15,wherein the encrypted ping communication comprises information packetstransferred between the device and the access radio.
 19. The networkaccess radio system according to claim 17, wherein the first encryptedping communication and the second encrypted ping communication areassociated with a verified code, and wherein the verified code isassociated with the access radio.
 20. The network access radio systemaccording to claim 19, wherein the verified code is used with keyexchange encrypted tunneling.